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Abstract 

We review some of quantum algorithms for search problems: Grover's search algorithm, its 
generalization to amplitude amplification, the applications of amplitude amplification to various 
problems and the recent quantum algorithms based on quantum walks. 

1 Introduction 

Quantum computation explores the possibilities of applying quantum mechanics to computer sci- 
ence. If built, quantum computers would provide speedups over conventional computers for a 
variety of problems. The two most famous results in this area are Shor's quantum algorithms for 
factoring and finding discrete logarithms [35] and Grover's search algorithm \2'2\ . 

Shor's and Grover's algorithms have been followed by a lot of other results. Each of these 
two algorithms has been generalized and applied to several other problems. New algorithms and 
new algorithmic paradigms (such as adiabatic computing 21 which is the quantum counterpart of 
simulated annealing) have been discovered. 

In this column, we survey some of the results on quantum algorithms, focusing on the branch 
of quantum algorithms inspired by Grover's search algorithm |22j . 

Instead of the conventional introduction/review on quantum computing which starts with the 
backgrounds from physics, we follow a different path. We first describe Grover's search result and its 
generalization, amplitude amplification (section|2J). Then, we explore what can be obtained by using 
these results as "quantum black boxes" in a combination with methods from conventional (non- 
quantum) algorithms and complexity (section |2J) . We give three examples of quantum algorithms 
of this type, one very simple and two more advanced ones. After that, in section 0J we show some 
examples were simple application of Grover's search fails but more advanced quantum algorithms 
(based on quantum walks) succeed. 

2 Grover's search and amplitude amplification 

Grover's search algorithm is one of main quantum algorithms. The problem that it solves is very 
simple to state: 
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Search. We have an input x±, . . . ,xn £ {0, 1} specified by a black box that answers queries. 
In a query, we input i to the black box and it outputs X{. Our task 1 is to output an i : x% = 1. 

Then, N queries are needed for deterministic algorithms and Jl(iV) queries are needed for 
probabilistic algorithms. (This follows by considering the case when there is exactly one i such 
that Xi = 1 and N — 1 variables i:xi = 0.) 

Grover [22] studied the quantum version of this problem (in which the black box is quantum, 
the input to the black box is a quantum state consisting of various i and the output is the input 
state modified depending on Xi). His result is 

Theorem 2.1 [22] Search can be solved with 0{y/N) quantum queries. 

2.1 Is it "database search"? 

Grover 's algorithm is often called "database search". In this interpretation, the variables x\, . . ., 
xn correspond to N entries of the database. A variable is 1 if the corresponding entry of database 
matches our search criteria. Then, the result is that we can search an unordered database of N 
entries in time 0(V~N)- 

This interpretation has caused some heated debates. Essentially, the issue is that, to access N 
elements, we would need quantum hardware of size fi(iV) |30[ section 6.5]. Since quantum hardware 
is likely to be expensive, this may be a big obstacle. 

Nevertheless, Graver's algorithm can be very useful in problems of a different nature. Say we 
have an instance of an NP-complete problem, for example, satisfiability. That is, we have a boolean 
formula F(yi, . . . , y n ) and we want to know if one of 2 n assignments y = (yi, . . . , y n ) of values to 
the variables makes F true. The naive exhaustive search requires testing 2 n assignments. 

With a quantum computer, we could instead reduce the satisfiability to search on N = 2™ 
variables x\, . . . ,xn with Xj = 1 if F is true for the i th candidate assignment y = (yi, . . . ,y n )- 
The black box that answers queries is just a circuit that takes an assignment (yi, ■ ■ ■ ,y n ) an d 
checks if F is true on this assignment. Then, Grover's algorithm allows to solve satisfiability in 
time 0(y/~N) = 0(1.41...") instead of N = 2 n . Similar approach applies to any exhaustive search 
problem. 

A knowledgeable reader might point out that 3-SAT can be solved even faster classically, in 
time 0(1.329.. . n ) by a non-naive algorithm [HSIESIISI- We address this issue in section l3~Tl 

2.2 Facts about Grover's algorithm 

Since Grover's result, the search problem has been analyzed in great detail. Here are some of results 
that we know: 

1. In general, Grover's algorithm is bounded-error. Given a black-box x\,..., xn £ {0, 1} where 
some Xi are equal to 1, the algorithm might not find any of them with a small probability. 
However, if we know that the number of % : Xi = 1 is exactly k, then the algorithm can be 
tuned so that it finds one of them with certainty (probability 1) in 0{\jN/k) steps |14j . 

1 There are several variations of this problem. We could either require the algorithm to output "none" if there 
is no i : Xi = 1 or allow any output in this situation. Or we could consider a decision version, where the algorithm 
only has to determine if there exists i : Xi = 1 instead of finding i. The complexity remains almost the same for all 
variations. 
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2. Moreover, if we know that the number of i : Xi = 1 is exactly k, the algorithm is exactly 
optimal [HZ]- The number of queries cannot be improved even by 1. For finding i : X{ = 1 
with certainty, the minimum number of queries is known to be exactly 



If the number of queries t is less than that, the best probability with which any quantum 
algorithm can find an i : xi = 1 is exactly the one achieved by running Grover's algorithm 
with t queries. 

3. If k is unknown, 0(y/~N) queries are still sufficient. If k is unknown but it is known that 
k > ko, 0(y / N/ko) queries suffice [TT] . 

4. In this case, the algorithm is inherently bounded-error. There is no quantum algorithm with 
less than N queries that solves Grover's problem with certainty for arbitrary x\, . . . , xn 0. 

If we have an instance x\, . . . ,xn with k elements equal to 1 and would like to find all k of 



them, Q(yNk) queries are sufficient and necessary. 

2.3 Amplitude amplification 

Let A be a (classical or quantum) algorithm with one sided error. If the correct answer is "no", 
A always outputs "no" . If the correct answer is "yes" , A outputs "yes" with at least some (small) 
probability e > 0. 

An example is an algorithm for SAT (or any other problem in NP) which outputs "the formula 
is satisfiable" only if it finds a satisfying assignment. Or, a different example is an algorithm for 
Grover's search problem which outputs "there exists i : Xi = 1" only if it has found such %. 

How many times do we need to repeat the algorithm to increase its success probability from a 
small e to a constant (for example, 2/3)? algorithm to increase the success probability? Classically, 
0(l/e) repetitions are needed. In quantum case, a generalization of Grover's algorithm gives 

Theorem 2.2 \1$ Let A be a quantum algorithm with one-sided error and success probability at 
least e > 0. Then, there is a quantum algorithm B that solves the same problem with success 
probability 2/3 by invoking A 0{-^=) times. 

This result is called amplitude amplification. For more details, see [T3|. Similar result is also 
known for algorithms with two-sided error but it has not found as many applications as amplitude 
amplification for algorithms with one-sided error. 

3 Three applications 

In this section, we show 3 examples how Grover's algorithm and amplitude amplification can be 
used to solve other problems. The examples are selected to be solvable by just two ideas from 
quantum computation (and some algorithmic ingenuity). The first of two ideas is Grover's search 
and amplitude amplification, described in the previous section. The second idea is that any classical 
(either deterministic or probabilistic) computation can be simulated on a quantum computer |3U1 
section 1.4]. More precisely, 




(1) 
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• In the circuit model, a classical circuit with N gates can be simulated by a quantum circuit 
with O(N) gates. 

• If the query model (when only the number of queries is counted), a classical computation 
with N queries can be simulated by a quantum computation with TV queries. 

This greatly simplifies descriptions of quantum algorithms. Instead of describing a quantum algo- 
rithm, we can describe a classical algorithm that succeeds with some small probability e. Then, we 
can transform the classical algorithm to a quantum algorithm and apply the amplitude amplifica- 
tion to the quantum algorithm. The result is a quantum algorithm with the running time or the 
number of queries that is 0(-^) times the one for the classical algorithm with which we started. 

A similar reasoning can be applied, if instead of a purely classical algorithm, we started with 
a classical algorithm that involves quantum subroutines. Such algorithms can also be transformed 
into quantum algorithms with the same complexity. 

3.1 3-satisfiability 

As we described in section \2.1\ Grover's algorithm can solve 3-satisfiability in 0(lAl... n poly(n)) 
steps. However, the best known classical algorithm for 3-satisfiability is faster than that, running 
in time 0(1. 329. .. n ) [HJ. Does this mean that Grover's algorithm is not useful for satisfiability? 

Not quite. The best classical algorithm can be combined with Grover's search. The result is 
a quantum algorithm that runs in time O (1. 153... n poly (n)), providing a square-root-speedup over 

EH- 

We first describe the classical algorithm (due to Schdning ,33 , improved by |25l I31j). Its 
structure is as follows: 

1. Pick a random initial assignment x\, . . . , x n . 

2. 3ra times repeat: 

(a) If all clauses satisfied, stop. 

(b) Otherwise, find an unsatisfied clause. Make it satisfied by choosing a variable in this 
clause uniformly at random and changing its value. 

The result of [HJ is that, for an appropriate initial probability distribution in the first step, the 
algorithm finds a satisfying assignment (if there is one) with a probability at least c n (where 
c = 1 ). Repeating the algorithm 1.329..." times gives an algorithm that finds a satisfying 
assignment in time O (1. 329... n poly (n)) with a constant success probability. 

To obtain a quantum algorithm, we just use quantum amplitude amplification instead of clas- 
sical repetition. As described in section 12.31 amplitude amplification allows to increase the suc- 
cess probability to a constant, repeating the algorithm 0{-^=) times. In this case, this means 

0(Vl-329... n ) = 0(1. 153.. . n ) repetitions. 

The result is very simple but it illustrates an important point. For some problems, Grover's 
algorithm can provide a quadratic speedup not just over the naive classical algorithm (testing all 
assignments) but over better classical algorithms as well. 
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3.2 Element distinctness 

Element Distinctness. We are given / : {1, 2, . . . , N} — ► {1,2,..., N} specified by a black box 
that, given i, answers the value of f(i). The task is to determine if there are two inputs i 7^ j 
for which f(i) = f(j). 

The measure of complexity is the number of queries to the black box. Classically, this problem 
requires Q(N) queries. In quantum case, there are two algorithms. The first, due to ^3] uses Grover 
search in a clever two-level construction and solves the problem 0(iV 3//4 ) queries. The second, due 
to [Sj, uses a technique combining search with quantum walks and solves the problem with 0(N 2 / 3 ) 
queries. This is optimal, because of an f2(iV 2 / 3 ) lower bound by Shi |34j . 

In this section, we show the 0(iV 3 / 4 ) algorithm by Buhrman et.al. [15] . While the result is 
weaker than the later algorithm of [Sj, the idea is very elegant. Consider the following algorithm: 



1. Choose v N random numbers i\, . . . , i ^ G {1, 2, . . . , N}. Evaluate f(h), ■ ■ ., f(i ^m)- If two 
of them are equal, stop, output the two equal elements. 



2. Use Graver's search to search (among remaining N — \? N indices k G {1,2,..., N}) for an 
index k such that f(k) = f(ij) for some j. 



This algorithm requires V N queries for the first step and 0(V N) queries for the second step. 
(Notice that we do not need to query f(ij) since their values are known from the first step.) The 
total number is 0(\fN). 

If there is a pair i,j such that f(i) = f(J), then, with probability = i is among 
^/jj. In this case, the second step will find j (or some other element k such that f(k) 
is equal to one of f(h), ■ ■ ., f(i ^/jy)) a constant probability. Thus, the algorithm succeeds with 
probability at least 

We can now apply the amplitude amplification, described in section l2~Tfl It increases the success 
probability to a constant with 0(-^) repetitions of the whole algorithm. Since e = c ^^ f , 0(A r1 / 4 ) 

repetitions suffice. The total number of queries needed is O^^N 1 / 2 ) = 0(N 3 / 4 ). 



3.3 Finding global and local minima 

In this section, we describe quantum algorithms for two minimum-finding problems. 

Global Minimum. We have an integer-valued function f(i) of one variable i £ {1, 2, . . . , N}, 
specified by black box that answers queries. The input of a query is i 6 {1, 2, ... , N}, the output 
is f(i). The task is to find i such that f(i) < f(j) for any j 7^ i. 

Local Minimum. We have an integer-valued function f(xi,...,x n ) of Boolean variables 
x%, . . . , x n £ {0, 1}, specified by black box that answers queries. The input of a query is x±, . . . , x n £ 
{0, 1}, the output is f(x±, . . . , x n ). The task is to find a local minimum: an assignment xi, . . . , x n 
such that changing any one variable does not decrease the value of the function: 

ffali • • • j 3<j_ x , 1 Xi , Xi-i-i , . . . , X n ~) J> f(%l j • • • j %n) • 

In both cases, the measure of complexity is the number of queries (i.e. the number of times 
that we need to evaluate /). We start by describing an algorithm for the first problem, which will 
be used as a subroutine in the second algorithm. 

Theorem 3.1 Global Minimum can be solved with 0(y/N) quantum queries. 
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Classically, tt(N) queries are required. 

The outline of the algorithm is as follows (some technical details are omitted, to simplify the 
presentation): 

1. Choose x uniformly at random from {1, . . . , N}; 

2. Repeat: 

(a) Use Grover's search to search for y with f(y) < f(x); 

(b) If search succeeds, set x = y. Otherwise, stop and output x as the minimum. 

We sketch why 0(-\fN) queries are sufficient for this algorithm, on intuitive but "hand-waving" 
level. (For a more detailed and rigorous argument, see [H].) For simplicity, assume that, for all x, 
the values of /(x) are distinct. Let xq be the value of x at the beginning of the algorithm and Xj 
be the value of x after the i th Grover's search. Since xq is a random element of {1, . . . ,N}, f(xo) 
will, on average, be the (iV/2) th smallest element of {/(l), . . . , /(JV)}. After the first iteration, 
x\ is some element with f(xi) < /(xo). By inspecting Grover's algorithm, we can find out that 
the probabilities of algorithm outputting x\ are equal for all x\ with f(x\) < f(xo). Thus, x\ 
is uniformly random among numbers with /(xi) < J{xq). Since /(xo) was, on average, be the 
(iV/2) th smallest element of {/(l), . . . , f(N)}, this means that f(x{) is, on average, the (N/4) 
smallest element. By a similar argument, /(xj) is, on average the (N/2 l ) th smallest element in 
{/(l),...,/(iV)}. 

We now remember that Grover's search uses O(yjNjk) queries where k is the number of solu- 
tions. Consider repetitions of the minimum finding algorithm in the order from the last to the first. 
By the argument above, we would expect that, in the last iteration before finding the minimum, 
k ~ 1, then, in the iteration before that, k ~ 2, then k ~ 4 and so on. Then, the total number of 
queries in all the repetitions of Grover's search is of order 

VN + 0V/2 + 0V/4 + ... = v ^(l + i= + ~ + ...). (2) 

The term in brackets is a decreasing geometric progression and, therefore, sums up to a constant. 
This means that the sum of equation (J2J) is of order 0(\Z~N). 

We now turn to algorithms for Local Minimum. Classically, Q(2 n / 2 poly(n)) queries are 
necessary and sufficient (SIP- In quantum case, 

Theorem 3.2 J7J/ Local minimum can be solved with 0(2 n / 3 n 1 / 6 ) quantum queries. 
The algorithm (again, in a simplified form) is as follows: 

1. Choose m assignments x = (a?i, . . . ,x n ) uniformly at random. Use Grover's search to find 
one with the smallest value of f(xi, . . . , x n ). 

2. 2 n+1 jm times repeat: 

(a) Use Grover's search to search for (y\, . . . , y n ) with f(y\, . . . , y n ) < f(xi, . . . , x n ), among 
n assignments (yi, . . . , y n ) that differ from (xi, . . . , x n ) in exactly one variable. 

(b) If such (yi, ... , y n ) is found, set (aci, . . . , x n ) = (y%, . . . , y n ). Otherwise, stop and claim 
that (xi, . . . , x n ) is a local minimum. 
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The first step requires 0{y/m) queries. The second step requires 0{y/n) queries each time it is 
repeated. The total number is 0(\/rn + ^y/n). The minimum of this expression is 0(2 n/ ' 3 n 1 / 6 ) 
which is achieved by setting m = 2 2n / 3 n 1//3 . 

The correctness of the algorithm follows from the fact that, if we pick m elements out of 2 n , 
then, with high probability, one of those m elements will be among 2 n+1 /m smallest among all 2 n 
elements (see for a proof). If this is the case, the minimum of m elements is also among 2 n+1 /m 
smallest elements among all 2 n elements. Then, the second step of the algorithm will lead to a 
local minimum in at most 2 n+1 /m steps because each step replaces (x±, ... ,x n ) by an assignment 
with a smaller value of / and there are at most 2 n+1 /m assignments for which / has smaller value 
than for the starting point. 

4 Local search and quantum walks 
4.1 Two problems 

Next, we show two situations when a simple application of Grover's algorithm does not give a good 
quantum algorithm. 

Search on grid. Consider N memory cells, arranged into y/N x y/N grid. Each cell stores an 
element x, G {0, 1}. Our task is to find an element % : X{ = 1. At each moment of time, we are 
in some memory location. In one time step, we can either query the current location or move to 
an adjacent cell. (In the quantum version, we can be in a quantum state consisting of various 
locations. But we still require that no part of this state moves more than distance 1 in one time 
unit.) 

Grover's algorithm finds an element i : Xi = 1 with 0{yN) queries. But, between any two 
queries, it needs Q(yN) moves, since a query to one element can be followed by a query to any 
other element. The total number of steps is of order x y/N = N. A similar number of steps 
can be achieved by a classical algorithm that just traverses the grid row by row and queries every 
cell. That takes O(N) moves and O(N) queries, for a total of O(N) steps as well. The quantum 
advantage seems to disappear [TU] . 

If the ./V items are arranged in 3 dimensions, in a cube with side of length O(yN), then the 
straightforward quantum search takes 0{y/N y/N) = 0(iV 5 / 6 ) which is better than classical 0{N) 
but still worse than 0(y/N) in the usual Grover's search when only queries are counted. 
Searching the element distinctness graph. Element distinctness reduces to search a certain 
graph. Let 1 < M < N. Define a bipartite graph, with the vertices being all subsets of {1, 2, . . . , N} 
of size m and size m + 1. A vertex vs corresponding to a subset S is connected to a vertex vt if 
\S\ = M, \T\ = M + 1 and T = S U {i} for some i & {1,2,... ,N}. A vertex v s is marked if the set 

5 contains i,j such that i ^ j and X{ = Xj. The task is to find a marked vertex. In one step, we 
are allowed to examine the current vertex or to move to an adjacent vertex. 

If we can search this graph in f(N) steps, we can solve element distinctness with at most 
f(N) + M queries, in a following way. If we are at a vertex vs, we will know the values of all x^, 
i £ S. Then, testing if a vertex is marked can be done with no queries and moving to an adjacent 
vertex vt can be done with 1 query by querying the only element i £ T — S. To achieve that, we 
use the first M queries to query all Xi for i £ S where S is the set corresponding to the starting 
vertex vs- The total number of queries is M to start the algorithm and at most one query per 
search algorithm step afterwards. 
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Again, let us try to use Grover's algorithm to search this graph. If there is exactly one pair of 
equal elements X 2 — X j y then the probability of a random vertex vs, \S\ = M being marked is 

MM -I M 2 
Pr[i e S]Pr[j eS\ i eS} = j^j^j = (1 + o{l)) w 

Amplitude amplification implies that we can find such set S by testing O(j^) vertices which is a 
square root of what one would need classically. However, testing each vertex vs involves querying 
M elements. The total number of queries is of order ttM = A which is the same as if we just 
queried all A elements x\ to begin with. 

Both examples illustrate the same general situation. Sometimes, we have a search space, where 
after testing an item, it is faster to test a neighboring item than an arbitrary item. This could 
come either from physical constraints on the search space (the first example) or an algorithmic 
structure (the second example). A straightforward application of Grover's algorithm does not do 
well on such spaces, because it does not respect the structure of the space. 

4.2 Solution to two problems 

There is a recent approach, based on quantum walks (quantum counterparts of random walks) that 
overcomes this problem. (For more information on quantum walks, see the surveys |261 15].) 

Theorem 4.1 ^ Spatial search can be solved with 

1. 0(y/N log N) steps in 2 dimensions, if there is a unique i : x\ = 1; 

2. 0(\/Alog 2 A) steps in 2 dimensions in the general case (no assumptions on the number of 
i : Xi = I); 

3. 0(y/N) steps in 3 and more dimensions. 

Quantum walks also give a better search algorithm for the element distinctness graph. It can 
be searched in 0(N/VM) steps, implying an algorithm for element distinctness with 0(M + 

steps. Setting M = A 2 / 3 gives 

Theorem 4.2 [5] Element distinctness can be solved with 0(A 2 / 3 ) queries. 

For the first result (spatial search), there is a different solution that involves amplitude am- 
plification instead of quantum walks 0, giving 0(y/N) in 3 dimensions and 0(\/Ak>g 2 A) and 
0(\ZiVlog 3 A) in the two 2-dimensional cases. For element distinctness, quantum walks are the 
only approach known to give 0(A 2 / 3 ) algorithm. 

Szegedy |36| has generalized element distinctness and spatial search, by showing how to convert 
a general classical Markov chain into a quantum walk algorithm. His generalization of element 
distinctness is 

Theorem 4.3 [36] Let P be a symmetric Markov chain with a gap between the first and the second 
eigenvalue being e and at least 5 fraction of states being marked. Assume that we can perform the 
following operations: 

• generate a uniformly random element in 70 steps; 
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• given a state x, generate a sample from P(x, y) in 71 steps; 

• check if a state is marked in 72 steps. 

Then, there is a quantum algorithm that finds a marked state in 0(70 + 7^(71 + 72)) steps. 

For comparison, a classical random walk would find a marked state in 0(70 + ^(71 +72)) steps. 

The element distinctness algorithm is a special case of Theorem 14. 31 where the states of Markov 
chain are sets 5, \S\ = M or |5| = M + 1 and, at each step, the Markov chain adds (if \S\ = M) 
or removes (if |S| = M + 1) a random element from the set. 

4.3 Applications of element distinctness 

There are several results that build on element distinctness algorithm |27l 1181 116j . 

Triangle finding. A graph G with N vertices is specified by ( 2 ) variables Xij with Xy = 1 if 
there is an edge between vertices i and j. The access to x^ is by queries to a black box. The task 
is to find if the graph G contains a triangle. 

Theorem 4.4 [i?7| / Triangle finding can be solved with 0(N 1,3 ) quantum queries. 

The construction [27] uses element distinctness as a subroutine in a clever two-level construction 
reminiscent of the 0(iV 3//4 ) algorithm for element distinctness in section l3~2l Another problem for 
which element distinctness is useful as a subroutine is 

Matrix product. Three N x N Boolean matrices A, B and C are specified by variables aij, 
bij, Cij, n 2 variables per matrix. The access to the variables is by queries to a black box. The task 
is to find if AB = C, with the arithmetic operations modulo 2. 

Theorem 4.5 ji6j / Matrix product can be solved with 0(iV 5 / 3 ) quantum queries. 

5 Conclusion and open problems 

In this column, we reviewed some of quantum algorithms for search problems: Grover's search, 
amplitude amplification, their applications to NP-complete problems, element distinctness and 
finding local and global minima, and improved quantum search algorithms using quantum walks. 

There are other interesting results that share similar ideas or use the number of queries as the 
complexity measure. To mention a few, have constructed a quantum algorithm for collision 
problem, |131 1231 129j have given quantum algorithms for approximate counting, finding mean and 
median, [21] studied quantum complexity of searching among iV ordered items and sorting and 
there is a large amount of work on quantum lower bounds (e.g. [Slinilll). 

We conclude with some related open problems. 

1. Complexity of graph problems. Complexity of several graph problems remains open in 
the query model. First, can the 0(iV 13 ) query triangle algorithm be improved? The best 
lower bound for this problem is S7(iV) (folklore). Second, what is the query complexity of 
finding a matching in a bipartite graph G with iV vertices on each side, specified by iV 2 
variables? There is an f2(iV L5 ) lower bound but no quantum algorithm that uses o(N 2 ) 
queries. 
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2. Generalizing quantum walk algorithms. As we saw in section|21 amplitude amplification 
provides an easy way to apply Grover's technique to various problem without going into details 
of Grover's search algorithm. Quantum walk results (theorems 14,11 and I4.2JI share common 
proof ideas. Can we find an generalization for these two results which would be as easy-to-use 
as amplitude amplification? 

Results of Szegedy J36J (e.g. Theorem 14.3(1 are a major advance in this direction. 

3. Space usage in element distinctness. Both known algorithms for element distinctness 
use considerable amounts of memory which has caused some criticism [22]. The 0(iV 3 / 4 ) 
algorithm of ^3] stores values of 0(y/N) variables and the 0(iV 2 / 3 ) algorithm of [3] stores 
0(N 2 / 3 ) variables. Is it possible to design a quantum algorithm that uses less space? Or can 
we prove a time-space lower bound saying that there is no algorithm with better space usage 
for the given number of queries? 

4. Quantum- classical relations. The quantum speedups described in this column are poly- 
nomial rather than exponential (as in Shor's factoring algorithm). This is inherent for a wide 
class of problems. Consider computing a total Boolean function f{x\, . . . , xjv), with the vari- 
ables x\, . . . ,xn given by a black box that answers queries (as in most problems described in 
this column). Let D(f) be the number of queries needed to compute / deterministically and 
Q{f) be the number of queries needed to compute / by a (bounded-error) quantum algorithm. 
Then, D{f) and Q(J) are polynomially related: D(f) = 0(Q 6 (/)) 0. 

The open question is: what is the biggest possible gap between D(f) and Q(/)? The best 
known result is for Grover's search problem: D{f) = N, Q{f) = @(VN), D(f) = 6(Q 2 (/)). 
Can we find / with a bigger gap or improve the D(f) = 0(Q 6 (f)) relation? 

A similar problem is open if we consider the number of queries needed by the best 

exact quantum algorithm (an exact algorithm is one which gives correct answer with certainty 
instead of probability 1 — e). Then, we know that D(f) = 0{Q\(f)) [2B] but there is no known 
example for which Qe{J) = °(D(f)). For more information on this topic, we refer the reader 
to an excellent survey by Buhrman and de Wolf |17| . 
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